Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
File: EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft (raw, json)
Hash identifier: /J9hXCJQcABsypPP6fYFuoIN2DOQM+L+8N8cZQ00nvE=
Subject key identifier: 68:31:01:EB:E0:7E:34:EC:38:B9:82:E7:73:30:BE:09:11:1A:20:D9
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Certificate issuer: /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial: 01A13590D587907550FD1D0EF8485FE83DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
Manifest number: 0CAF
Signing time: Tue 13 Oct 2026 14:00:46 +0000
Manifest this update: Tue 13 Oct 2026 14:00:46 +0000
Manifest next update: Wed 14 Oct 2026 14:00:46 +0000
Files and hashes: 1: 83yp9RS3s8eXojaScYjtFG_MDFg.roa (hash: 87TXxEFIZkiZwcWyqY2NvriX9BTGocm4Ri0lAKL2aQM=)
2: C3EbT65pZdTh7IHQ_SH1E1Q3faQ.asa (hash: 6RJCYSiIM4CZdaMt1QH6napTMQyBB8/2uvcNOS+XnT4=)
3: EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl (hash: khRJwNfNYMez2wBArVAEZalPxZvjOhBmlhSOlaC/vxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:90:d5:87:90:75:50:fd:1d:0e:f8:48:5f:e8:3d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Validity
Not Before: Oct 13 14:00:46 2026 GMT
Not After : Oct 14 14:00:46 2026 GMT
Subject: CN=683101ebe07e34ec38b982e77330be09111a20d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:c7:a7:02:fc:76:51:09:9e:74:b3:83:da:
48:c2:de:3e:a5:ae:5e:4c:89:a7:39:13:81:df:70:
3f:e7:18:2f:53:7d:8b:ab:e6:8c:df:60:0e:87:fe:
c5:d7:eb:99:a4:b5:83:0d:94:98:64:bd:53:1e:22:
f0:a0:be:be:6c:fa:97:11:43:3d:06:46:1f:3a:03:
bd:85:9c:39:54:60:3e:1c:6c:8e:fc:56:9e:ec:a9:
a1:f6:16:3e:c9:52:ff:5c:f2:24:f5:18:93:c5:b0:
f5:2e:30:17:52:60:74:57:31:f6:f4:41:1c:ef:d0:
35:98:6c:2f:fa:00:33:85:0f:7f:6d:1b:49:11:3e:
f8:65:d9:10:6c:da:1e:a1:be:9f:96:50:bd:b5:7e:
95:da:e1:77:1f:c7:f8:31:dd:ee:69:1d:3c:7a:fa:
36:64:25:4d:d3:6d:4a:ad:bf:6d:93:79:3f:0e:dd:
aa:f3:9f:dd:6a:1a:99:f7:b6:b8:7f:6f:b8:69:92:
ce:24:be:78:84:9e:26:1a:d7:84:4b:5a:48:56:11:
af:55:32:22:07:05:53:af:74:63:4a:01:93:6d:d2:
b0:7f:91:f8:79:ea:b6:c0:5d:b4:b4:2f:bf:f0:81:
59:eb:ef:31:2d:29:22:d4:55:7f:49:7b:6d:ef:a2:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:31:01:EB:E0:7E:34:EC:38:B9:82:E7:73:30:BE:09:11:1A:20:D9
X509v3 Authority Key Identifier:
keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:88:2e:d6:05:94:74:6c:58:ad:0b:d4:69:1b:41:17:3e:f4:
23:7a:33:71:0d:86:be:13:8f:23:03:6b:65:14:3d:67:83:a2:
a3:ae:a4:9f:8d:6f:1f:f8:97:98:54:a3:64:a7:3b:8c:75:61:
ad:1a:15:a0:93:42:a2:95:2d:a8:b9:85:c9:a2:67:cf:84:ec:
5b:ee:28:e0:30:13:65:f8:dc:f7:1a:28:c9:77:9a:f4:e5:9c:
22:1f:75:41:98:42:67:7d:1a:0c:a8:4f:3b:e5:94:83:44:f4:
15:ca:2b:f8:4d:dc:3d:74:73:5e:f3:29:31:a2:28:68:b2:80:
9a:fc:70:b0:c5:15:95:a1:d1:20:9c:1b:a4:75:ba:df:0c:06:
81:3b:c9:68:66:d3:74:d4:34:1d:f4:c3:5c:ce:7f:a3:0d:c9:
25:a3:c2:96:90:62:0b:0d:90:19:db:1e:aa:d0:c5:6d:0a:45:
07:f6:02:4e:4e:08:e1:35:f7:dd:9d:38:31:e4:b1:83:26:86:
37:cb:de:fc:6f:e3:87:7a:69:50:55:df:6e:53:82:17:ac:53:
ca:51:ce:59:bb:6f:a8:39:66:e2:c6:0b:fb:14:50:10:5d:28:
da:74:65:58:1f:c2:ee:60:a1:4f:65:55:fa:64:7e:50:0f:7b:
fb:68:11:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1kNWHkHVQ/R0O+Ehf6D37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYWI1N2FiMGU5NjUxODY3OTExNGNiZjBlZThhZjU0YmJm
ZGE1ZjUwHhcNMjYxMDEzMTQwMDQ2WhcNMjYxMDE0MTQwMDQ2WjAzMTEwLwYDVQQD
Eyg2ODMxMDFlYmUwN2UzNGVjMzhiOTgyZTc3MzMwYmUwOTExMWEyMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NbHpwL8dlEJnnSzg9pIwt4+pa5e
TImnOROB33A/5xgvU32Lq+aM32AOh/7F1+uZpLWDDZSYZL1THiLwoL6+bPqXEUM9
BkYfOgO9hZw5VGA+HGyO/Fae7Kmh9hY+yVL/XPIk9RiTxbD1LjAXUmB0VzH29EEc
79A1mGwv+gAzhQ9/bRtJET74ZdkQbNoeob6fllC9tX6V2uF3H8f4Md3uaR08evo2
ZCVN021Krb9tk3k/Dt2q85/dahqZ97a4f2+4aZLOJL54hJ4mGteES1pIVhGvVTIi
BwVTr3RjSgGTbdKwf5H4eeq2wF20tC+/8IFZ6+8xLSki1FV/SXtt76J+8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgxAevgfjTsOLmC53MwvgkRGiDZMB8GA1UdIwQY
MBaAFBCrV6sOllGGeRFMvw7or1S7/aX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNjFhYzItNmUyNy00ZDRlLWFiOWUt
ZjM4MGJmMGZkZDg0LzEvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNjFhYzItNmUyNy00ZDRlLWFiOWUtZjM4MGJmMGZkZDg0
LzEvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIgu1gWU
dGxYrQvUaRtBFz70I3ozcQ2GvhOPIwNrZRQ9Z4Oio66kn41vH/iXmFSjZKc7jHVh
rRoVoJNCopUtqLmFyaJnz4TsW+4o4DATZfjc9xooyXea9OWcIh91QZhCZ30aDKhP
O+WUg0T0Fcor+E3cPXRzXvMpMaIoaLKAmvxwsMUVlaHRIJwbpHW63wwGgTvJaGbT
dNQ0HfTDXM5/ow3JJaPClpBiCw2QGdseqtDFbQpFB/YCTk4I4TX33Z04MeSxgyaG
N8ve/G/jh3ppUFXfblOCF6xTylHOWbtvqDlm4sYL+xRQEF0o2nRlWB/C7mChT2VV
+mR+UA97+2gRqw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:13:34 2026 by rpki-client